Email: 575952 Autolearn: 2726 AvgScore: 3.51 AvgScanTime: 2.25 sec Spam: 185356 Autolearn: 197 AvgScore: 12.45 AvgScanTime: 2.69 sec Ham: 390596 Autolearn: 2529 AvgScore: -0.73 AvgScanTime: 2.04 sec Time Spent Running SA: 360.00 hours Time Spent Processing Spam: 138.41 hours Time Spent Processing Ham: 221.59 hours TOP SPAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 175986 89.18 94.94 86.44 2 DKIM_SIGNED 160803 77.90 86.75 73.70 3 XM_DK_Pass 155991 76.14 84.16 72.33 4 DKIM_VALID 154082 74.49 83.13 70.40 5 DCC_CHECK 149446 50.99 80.63 36.93 6 XMListUnsubscribeExists 138433 55.89 74.68 46.98 7 DKIM_VALID_AU 119940 54.87 64.71 50.19 8 XM_H_QuotedFrom 104146 42.76 56.19 36.39 9 XM_DK_Undo_02 92791 25.95 50.06 14.51 10 BAYES_99 83736 23.34 45.18 12.98 11 BAYES_999 72159 20.40 38.93 11.60 12 HTML_FONT_LOW_CONTRAST 68305 28.88 36.85 25.09 13 LOC_TINY_FONT_1 67907 25.05 36.64 19.55 14 TR_DCC_Bayes_99 67822 16.34 36.59 6.74 15 T_MIXED_ES 65710 32.91 35.45 31.71 16 BAYES_50 55820 46.01 30.12 53.56 17 MIME_HTML_ONLY 55794 22.21 30.10 18.46 18 FVGT_m_MULTI_ODD 50002 22.36 26.98 20.17 19 XMSubLong 47599 21.94 25.68 20.16 20 T_TM2_M_HEADER_IN_MSG 38154 28.58 20.58 32.37 21 DKIM_VALID_EF 37927 22.61 20.46 23.63 22 T_KAM_HTML_FONT_INVALID 37910 16.54 20.45 14.69 23 XM_Body_Dirty_Words 35924 14.13 19.38 11.64 24 HTML_IMAGE_RATIO_02 33245 10.66 17.94 7.20 25 DCC_CHECK_NEGATIVE 32291 46.82 17.42 60.77 26 MultiRelay 30428 19.60 16.42 21.11 27 RELAYCOUNTRY_META 30335 9.08 16.37 5.63 28 XM_Multi_Part_URI 27820 12.60 15.01 11.46 29 XM_Evil_Numbers_Gen 26901 10.12 14.51 8.03 30 BOTNET_IPINHOSTNAME 24445 7.63 13.19 5.00 31 BOTNET 23144 5.31 12.49 1.90 32 LOTS_OF_MONEY 22448 9.77 12.11 8.66 33 FSL_BULK_SIG 20039 8.34 10.81 7.17 34 UNTRUSTED_Relay 18485 4.18 9.97 1.44 35 LotsOfNums_01 17998 9.06 9.71 8.76 36 XM_B_Phish_Phrases 17572 6.44 9.48 4.99 37 T_XMDrugObfuBody_14 17423 8.63 9.40 8.26 38 XMSexyCombo_05 16950 5.18 9.14 3.29 39 TR_XM_DocInvoice 16666 5.55 8.99 3.91 40 HTML_IMAGE_RATIO_04 15071 6.07 8.13 5.10 41 XM_H_Long_From01 14435 6.77 7.79 6.29 42 TooManyTo_001 13782 8.22 7.44 8.60 43 BAYES_80 13518 5.23 7.29 4.26 44 RCVD_IN_MSPIKE_H2 13055 7.68 7.04 7.98 45 FROM_EXCESS_BASE64 12277 4.23 6.62 3.10 46 MPART_ALT_DIFF 12224 4.05 6.59 2.84 47 RCVD_IN_RP_SAFE 12136 9.05 6.55 10.24 48 XMSubMetaSx_00 11231 4.82 6.06 4.23 49 XM_UncommonTLD01 10846 5.09 5.85 4.72 50 BAYES_60 10501 6.14 5.67 6.36 51 RCVD_IN_RP_CERTIFIED 10256 7.87 5.53 8.97 52 HTML_IMAGE_RATIO_06 9869 3.91 5.32 3.24 53 MIME_HTML_MOSTLY 9604 3.18 5.18 2.23 54 MIME_QP_LONG_LINE 8924 5.48 4.81 5.79 55 XMStrtUSub 8449 4.65 4.56 4.70 56 XM_SPF_SoftFail 8091 3.24 4.37 2.70 57 TM2_M_URI_OPT_OUT 7786 2.48 4.20 1.66 58 BAYES_95 7776 3.16 4.20 2.67 59 XMNumbers 7448 2.98 4.02 2.49 60 XM_UB50 7276 1.89 3.93 0.93 61 RCVD_IN_BL_SPAMCOP_NET 7224 1.79 3.90 0.79 62 XM_SendGrid 7113 4.93 3.84 5.45 63 XM_DIRTYINTL 7089 2.54 3.82 1.93 64 HTML_IMAGE_RATIO_08 6934 2.74 3.74 2.27 65 T_REMOTE_IMAGE 6836 4.75 3.69 5.26 66 RELAYCOUNTRY_CA 6731 2.18 3.63 1.49 67 DKIM_INVALID 6721 3.40 3.63 3.30 68 URI_HEX 6457 2.11 3.48 1.46 69 XM_CamelCaseFrm001 6329 2.51 3.41 2.09 70 MultiRelay_Combo 6248 1.30 3.37 0.31 71 MultiRelay_CC 6248 1.30 3.37 0.31 72 T_TooManySym_01 5848 3.73 3.16 4.01 73 SUBJ_ALL_CAPS 5808 2.13 3.13 1.66 74 MIME_HTML_ONLY_MULTI 5459 1.92 2.95 1.43 75 XM_URI_RBL 5383 1.04 2.90 0.16 76 RCVD_IN_RP_RNBL 4926 0.89 2.66 0.05 77 T_XMHurry_00 4820 1.56 2.60 1.06 78 XM_OfRef6 4759 1.72 2.57 1.32 79 RCVD_IN_IADB_LISTED 4496 4.91 2.43 6.10 80 T_XMDrugObfuBody_08 4168 1.70 2.25 1.43 81 RCVD_IN_IADB_SPF 4061 4.33 2.19 5.35 82 XM_ProductURIs 4015 1.96 2.17 1.86 83 XMDiploma_00 3972 1.60 2.14 1.34 84 RCVD_IN_IADB_SENDERID 3862 3.91 2.08 4.77 85 RCVD_IN_IADB_DK 3831 3.83 2.07 4.66 86 XMBody_17 3609 0.94 1.95 0.47 87 MAILING_LIST_MULTI 3595 2.46 1.94 2.71 88 XM_H_Long_From02 3517 1.23 1.90 0.91 89 HTML_MIME_NO_HTML_TAG 3455 2.07 1.86 2.16 90 XM_UB99 3350 0.59 1.81 0.01 91 XMSubMetaI_00 3341 1.12 1.80 0.79 92 RELAYCOUNTRY_FR 3270 0.77 1.76 0.30 93 BOTNET_NORDNS 3263 0.59 1.76 0.04 94 XM_DK_Undo_01 3226 1.95 1.74 2.05 95 XMPhish30 3104 0.84 1.67 0.45 96 XMBody_78 3079 0.97 1.66 0.64 97 SpammyFromTLD_01 2981 1.92 1.61 2.07 98 URIBL_BLACK 2962 0.54 1.60 0.03 99 XMBdyGiftCard01 2904 1.13 1.57 0.93 100 SpammyFromTLD_02 2871 0.74 1.55 0.36 101 XMStockSpam_06 2864 1.23 1.55 1.08 102 URI_TRY_3LD 2781 1.15 1.50 0.99 103 T_FILL_THIS_FORM_SHORT 2772 1.09 1.50 0.90 104 TM2_M_VERY_LONG_WORD 2737 1.06 1.48 0.86 105 XM_S_JOY_D 2715 0.96 1.46 0.72 106 XM_UB80 2693 0.49 1.45 0.03 107 FILL_THIS_FORM 2685 0.77 1.45 0.45 108 XM_HighProb1 2661 0.47 1.44 0.02 109 RELAYCOUNTRY_GB 2639 1.29 1.42 1.23 110 XMSexyCombo_01 2633 1.31 1.42 1.26 111 TR_XM_RelayPhish 2607 0.83 1.41 0.55 112 XMHTML_After_End 2601 0.77 1.40 0.47 113 T_MONEY_PERCENT 2590 0.81 1.40 0.53 114 TR_LOTS_OF_MONEY2 2590 0.81 1.40 0.53 115 SUBJ_DOLLARS 2574 0.63 1.39 0.27 116 XM_UB999 2529 0.45 1.36 0.01 117 RCVD_IN_DNSWL_BLOCKED 2473 1.05 1.33 0.91 118 XMPhish14 2433 0.62 1.31 0.29 119 XMGenDplmaNmb 2423 1.02 1.31 0.89 120 FILL_THIS_FORM_LONG 2387 0.59 1.29 0.26 121 XMPhish11 2347 1.30 1.27 1.32 122 BAYES_40 2314 3.21 1.25 4.14 123 BODY_ENHANCEMENT 2300 0.42 1.24 0.03 124 UNPARSEABLE_RELAY 2275 2.65 1.23 3.33 125 T_XMDrugObfuBody_00 2246 0.96 1.21 0.84 126 BAYES_00 2241 6.38 1.21 8.83 127 XM_UB60 2213 0.44 1.19 0.08 128 TR_Symld_Words 2192 1.78 1.18 2.07 129 RCVD_IN_PSBL 2185 0.42 1.18 0.06 130 XMClaimOffer 2165 0.47 1.17 0.14 131 BAYES_20 2139 2.35 1.15 2.91 132 RCVD_IN_DNSWL_NONE 2111 0.91 1.14 0.80 133 T_TooManySym_02 1990 1.52 1.07 1.73 134 DIET_1 1965 0.67 1.06 0.48 135 RCVD_IN_MSPIKE_WL 1933 2.30 1.04 2.89 136 RCVD_IN_MSPIKE_H3 1917 2.28 1.03 2.87 137 HTML_SHORT_LINK_IMG_1 1907 0.35 1.03 0.03 138 T_Symld_Words_02 1883 0.63 1.02 0.45 139 HTML_FONT_FACE_BAD 1881 0.65 1.01 0.48 140 RDNS_DYNAMIC 1875 0.61 1.01 0.42 141 REMOVE_BEFORE_LINK 1853 0.52 1.00 0.29 142 TooManyTo_002 1852 2.03 1.00 2.52 143 URI_NOVOWEL 1826 0.61 0.99 0.43 144 RELAYCOUNTRY_AT 1784 0.40 0.96 0.13 145 TR_XM_DK_Bayes 1776 4.65 0.96 6.40 146 TR_LOTS_OF_MONEY3 1759 0.60 0.95 0.43 147 TR_XM_DK_Bayes1 1756 4.48 0.95 6.15 148 BODY_URI_ONLY 1756 0.34 0.95 0.05 149 LONG_JUNK_URI 1749 0.38 0.94 0.12 150 XM_H_PHPOS 1708 1.89 0.92 2.35 151 URIBL_DBL_SPAM 1704 0.30 0.92 0.01 152 TR_XM_DK_Bayes2 1699 3.64 0.92 4.93 153 XM_B_COPY_HTML 1684 0.62 0.91 0.48 154 FSL_THIS_IS_ADV 1669 0.35 0.90 0.09 155 XM_BadFromFormat 1666 0.48 0.90 0.28 156 ALL_TRUSTED 1664 10.33 0.90 14.81 157 HTML_TAG_BALANCE_BODY 1660 0.55 0.90 0.38 158 URIBL_SBL_A 1644 0.33 0.89 0.06 159 DKIM_ADSP_CUSTOM_MED 1640 1.01 0.88 1.07 160 FROM_ADDR_WS 1637 0.29 0.88 0.00 161 XM_XX_Yahoo 1630 0.35 0.88 0.10 162 TooManyTo_003 1628 1.36 0.88 1.60 163 RCVD_IN_IADB_VOUCHED 1627 2.96 0.88 3.95 164 T_HTML_TAG_BALANCE_CENTER 1612 0.42 0.87 0.21 165 RELAYCOUNTRY_CN 1606 0.34 0.87 0.08 166 T_DEAR_BENEFICIARY 1565 0.28 0.84 0.01 167 XM_B_REG_HTML 1554 0.62 0.84 0.52 168 LOW_PRICE 1536 0.38 0.83 0.16 169 XMBrknScrpt_02 1534 0.78 0.83 0.75 170 FILL_THIS_FORM_LOAN 1505 0.41 0.81 0.22 171 INVALID_DATE 1478 0.32 0.80 0.09 172 PLING_QUERY 1474 0.45 0.80 0.29 173 HTTPS_HTTP_MISMATCH 1460 0.53 0.79 0.40 174 XMMoneyMeta_00 1441 0.57 0.78 0.48 175 XMSlimDrugH 1403 0.41 0.76 0.24 176 TooManyTo_004 1395 1.00 0.75 1.12 177 TR_Caps_n_Bayes_80 1394 0.27 0.75 0.04 178 XM_Body_Obfu01 1377 0.49 0.74 0.37 179 RCVD_IN_MSPIKE_BL 1371 0.47 0.74 0.34 180 TR_MetaPhish_Combo_01 1369 0.75 0.74 0.76 181 XM_RXBody 1330 0.50 0.72 0.40 182 XMHTMLBadTable_001 1328 0.48 0.72 0.37 183 XM_Lotto 1299 0.44 0.70 0.31 184 HTML_FONT_SIZE_HUGE 1286 0.30 0.69 0.11 185 NML_ADSP_CUSTOM_MED 1283 0.78 0.69 0.82 186 RELAYCOUNTRY_DE 1260 0.58 0.68 0.53 187 RELAYCOUNTRY_RU 1255 0.27 0.68 0.08 188 RELAYCOUNTRY_AU 1249 0.57 0.67 0.52 189 FORGED_GMAIL_RCVD 1231 0.48 0.66 0.40 190 XM_PDF 1230 3.33 0.66 4.60 191 TooManyTo_005 1219 0.83 0.66 0.92 192 TRACKER_ID 1209 0.31 0.65 0.15 193 BOUNCE_MESSAGE 1195 1.53 0.64 1.95 194 ANY_BOUNCE_MESSAGE 1195 1.53 0.64 1.96 195 HTML_IMAGE_ONLY_28 1187 0.50 0.64 0.43 196 BAYES_05 1186 1.44 0.64 1.81 197 RCVD_IN_MSPIKE_L5 1159 0.22 0.63 0.02 198 MPART_ALT_DIFF_COUNT 1133 0.59 0.61 0.58 199 XMUrgent 1129 0.34 0.61 0.21 200 XM_H_PHPMailer 1125 0.63 0.61 0.65 ---------------------------------------------------------------------- TOP HAM RULES FIRED ---------------------------------------------------------------------- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM ---------------------------------------------------------------------- 1 HTML_MESSAGE 337643 89.18 94.94 86.44 2 DKIM_SIGNED 287857 77.90 86.75 73.70 3 XM_DK_Pass 282537 76.14 84.16 72.33 4 DKIM_VALID 274970 74.49 83.13 70.40 5 DCC_CHECK_NEGATIVE 237362 46.82 17.42 60.77 6 BAYES_50 209194 46.01 30.12 53.56 7 DKIM_VALID_AU 196057 54.87 64.71 50.19 8 XMListUnsubscribeExists 183484 55.89 74.68 46.98 9 DCC_CHECK 144236 50.99 80.63 36.93 10 XM_H_QuotedFrom 142156 42.76 56.19 36.39 11 T_TM2_M_HEADER_IN_MSG 126437 28.58 20.58 32.37 12 T_MIXED_ES 123846 32.91 35.45 31.71 13 HTML_FONT_LOW_CONTRAST 98002 28.88 36.85 25.09 14 DKIM_VALID_EF 92290 22.61 20.46 23.63 15 MultiRelay 82462 19.60 16.42 21.11 16 FVGT_m_MULTI_ODD 78764 22.36 26.98 20.17 17 XMSubLong 78741 21.94 25.68 20.16 18 LOC_TINY_FONT_1 76365 25.05 36.64 19.55 19 MIME_HTML_ONLY 72118 22.21 30.10 18.46 20 ALL_TRUSTED 57835 10.33 0.90 14.81 21 T_KAM_HTML_FONT_INVALID 57368 16.54 20.45 14.69 22 XM_DK_Undo_02 56687 25.95 50.06 14.51 23 BAYES_99 50716 23.34 45.18 12.98 24 XM_Body_Dirty_Words 45458 14.13 19.38 11.64 25 BAYES_999 45320 20.40 38.93 11.60 26 XM_Multi_Part_URI 44770 12.60 15.01 11.46 27 XM_DKIMWhitelistDomains 43171 7.52 0.07 11.05 28 RCVD_IN_RP_SAFE 39993 9.05 6.55 10.24 29 RCVD_IN_RP_CERTIFIED 35046 7.87 5.53 8.97 30 BAYES_00 34476 6.38 1.21 8.83 31 LotsOfNums_01 34206 9.06 9.71 8.76 32 LOTS_OF_MONEY 33827 9.77 12.11 8.66 33 TooManyTo_001 33584 8.22 7.44 8.60 34 T_XMDrugObfuBody_14 32254 8.63 9.40 8.26 35 XM_Evil_Numbers_Gen 31368 10.12 14.51 8.03 36 RCVD_IN_MSPIKE_H2 31178 7.68 7.04 7.98 37 HTML_IMAGE_RATIO_02 28131 10.66 17.94 7.20 38 FSL_BULK_SIG 27997 8.34 10.81 7.17 39 TR_DCC_Bayes_99 26314 16.34 36.59 6.74 40 TR_XM_DK_Bayes 25003 4.65 0.96 6.40 41 BAYES_60 24850 6.14 5.67 6.36 42 XM_H_Long_From01 24560 6.77 7.79 6.29 43 TR_XM_DK_Bayes1 24018 4.48 0.95 6.15 44 RCVD_IN_IADB_LISTED 23810 4.91 2.43 6.10 45 IN_ZIMBRA_NJ_WHITELIST 23807 4.15 0.04 6.10 46 MIME_QP_LONG_LINE 22627 5.48 4.81 5.79 47 RELAYCOUNTRY_META 21981 9.08 16.37 5.63 48 XM_SendGrid 21279 4.93 3.84 5.45 49 RCVD_IN_IADB_SPF 20897 4.33 2.19 5.35 50 T_REMOTE_IMAGE 20543 4.75 3.69 5.26 51 HTML_IMAGE_RATIO_04 19914 6.07 8.13 5.10 52 BOTNET_IPINHOSTNAME 19512 7.63 13.19 5.00 53 XM_B_Phish_Phrases 19509 6.44 9.48 4.99 54 TR_XM_DK_Bayes2 19250 3.64 0.92 4.93 55 RCVD_IN_IADB_SENDERID 18631 3.91 2.08 4.77 56 XM_UncommonTLD01 18452 5.09 5.85 4.72 57 XMStrtUSub 18344 4.65 4.56 4.70 58 RCVD_IN_IADB_DK 18215 3.83 2.07 4.66 59 XM_PDF 17963 3.33 0.66 4.60 60 BAYES_80 16626 5.23 7.29 4.26 61 XMSubMetaSx_00 16538 4.82 6.06 4.23 62 BAYES_40 16164 3.21 1.25 4.14 63 T_TooManySym_01 15658 3.73 3.16 4.01 64 RCVD_IN_IADB_VOUCHED 15416 2.96 0.88 3.95 65 TR_XM_DocInvoice 15275 5.55 8.99 3.91 66 UNPARSEABLE_RELAY 13004 2.65 1.23 3.33 67 DKIM_INVALID 12887 3.40 3.63 3.30 68 XMSexyCombo_05 12870 5.18 9.14 3.29 69 HTML_IMAGE_RATIO_06 12667 3.91 5.32 3.24 70 FROM_EXCESS_BASE64 12096 4.23 6.62 3.10 71 TVD_RCVD_IP 11628 2.09 0.24 2.98 72 BAYES_20 11374 2.35 1.15 2.91 73 RCVD_IN_MSPIKE_WL 11300 2.30 1.04 2.89 74 RCVD_IN_MSPIKE_H3 11225 2.28 1.03 2.87 75 MPART_ALT_DIFF 11110 4.05 6.59 2.84 76 MAILING_LIST_MULTI 10587 2.46 1.94 2.71 77 XM_SPF_SoftFail 10563 3.24 4.37 2.70 78 BAYES_95 10419 3.16 4.20 2.67 79 TooManyTo_002 9860 2.03 1.00 2.52 80 XMNumbers 9737 2.98 4.02 2.49 81 HELO_NODOT 9230 1.70 0.30 2.36 82 XM_H_PHPOS 9164 1.89 0.92 2.35 83 IN_HORDE_ADDRESS_BOOK 8991 1.59 0.07 2.30 84 HTML_IMAGE_RATIO_08 8857 2.74 3.74 2.27 85 MIME_HTML_MOSTLY 8724 3.18 5.18 2.23 86 HTML_MIME_NO_HTML_TAG 8449 2.07 1.86 2.16 87 XM_CamelCaseFrm001 8148 2.51 3.41 2.09 88 TR_Symld_Words 8085 1.78 1.18 2.07 89 SpammyFromTLD_01 8082 1.92 1.61 2.07 90 XM_DK_Undo_01 7992 1.95 1.74 2.05 91 ANY_BOUNCE_MESSAGE 7637 1.53 0.64 1.96 92 BOUNCE_MESSAGE 7632 1.53 0.64 1.95 93 XM_DIRTYINTL 7542 2.54 3.82 1.93 94 BOTNET 7434 5.31 12.49 1.90 95 XM_ProductURIs 7265 1.96 2.17 1.86 96 RCVD_IN_IADB_OPTIN 7224 1.42 0.50 1.85 97 BAYES_05 7083 1.44 0.64 1.81 98 INVALID_MSGID 6893 1.28 0.25 1.76 99 T_TooManySym_02 6774 1.52 1.07 1.73 100 USER_IN_DEF_DKIM_WL 6563 1.15 0.03 1.68 101 TM2_M_URI_OPT_OUT 6477 2.48 4.20 1.66 102 SUBJ_ALL_CAPS 6469 2.13 3.13 1.66 103 TooManyTo_003 6231 1.36 0.88 1.60 104 TO_MALFORMED 6060 1.14 0.26 1.55 105 RELAYCOUNTRY_CA 5825 2.18 3.63 1.49 106 URI_HEX 5699 2.11 3.48 1.46 107 UNTRUSTED_Relay 5613 4.18 9.97 1.44 108 T_XMDrugObfuBody_08 5603 1.70 2.25 1.43 109 MIME_HTML_ONLY_MULTI 5591 1.92 2.95 1.43 110 XMCapTrack 5511 1.12 0.51 1.41 111 XMDiploma_00 5217 1.60 2.14 1.34 112 XMPhish11 5143 1.30 1.27 1.32 113 XM_OfRef6 5137 1.72 2.57 1.32 114 XM_GoogleGroups 5024 1.04 0.53 1.29 115 XMSexyCombo_01 4927 1.31 1.42 1.26 116 RELAYCOUNTRY_GB 4788 1.29 1.42 1.23 117 TooManyTo_004 4378 1.00 0.75 1.12 118 XMStockSpam_06 4229 1.23 1.55 1.08 119 DKIM_ADSP_CUSTOM_MED 4170 1.01 0.88 1.07 120 T_XMHurry_00 4146 1.56 2.60 1.06 121 URI_TRY_3LD 3868 1.15 1.50 0.99 122 XMBdyGiftCard01 3629 1.13 1.57 0.93 123 XM_UB50 3625 1.89 3.93 0.93 124 TooManyTo_005 3574 0.83 0.66 0.92 125 RCVD_IN_DNSWL_BLOCKED 3570 1.05 1.33 0.91 126 XM_H_Long_From02 3559 1.23 1.90 0.91 127 T_FILL_THIS_FORM_SHORT 3526 1.09 1.50 0.90 128 XMGenDplmaNmb 3464 1.02 1.31 0.89 129 TM2_M_VERY_LONG_WORD 3355 1.06 1.48 0.86 130 T_XMDrugObfuBody_00 3284 0.96 1.21 0.84 131 NML_ADSP_CUSTOM_MED 3199 0.78 0.69 0.82 132 T_TooManySym_03 3151 0.66 0.36 0.81 133 RCVD_IN_DNSWL_NONE 3122 0.91 1.14 0.80 134 RCVD_IN_BL_SPAMCOP_NET 3095 1.79 3.90 0.79 135 USER_IN_WHITELIST 3094 0.54 0.00 0.79 136 XMSubMetaI_00 3091 1.12 1.80 0.79 137 TR_MetaPhish_Combo_01 2954 0.75 0.74 0.76 138 XMBrknScrpt_02 2944 0.78 0.83 0.75 139 XM_ShortIntro_01 2920 0.63 0.39 0.75 140 XMBody_95 2876 0.55 0.16 0.74 141 XM_S_JOY_D 2812 0.96 1.46 0.72 142 RCVD_IN_IADB_DOPTIN 2677 0.48 0.06 0.69 143 XM_H_PHPMailer 2531 0.63 0.61 0.65 144 XMSolicitRefs_0 2497 0.53 0.30 0.64 145 XMBody_78 2483 0.97 1.66 0.64 146 RCVD_IN_SORBS_DUL 2432 0.47 0.14 0.62 147 SHORT_HELO_AND_INLINE_IMAGE 2390 0.44 0.07 0.61 148 MPART_ALT_DIFF_COUNT 2284 0.59 0.61 0.58 149 XMNoVowels 2282 0.57 0.53 0.58 150 T_OBFU_PDF_ATTACH 2270 0.45 0.17 0.58 151 XMGappySubj_01 2220 0.50 0.35 0.57 152 TR_XM_RelayPhish 2160 0.83 1.41 0.55 153 RELAYCOUNTRY_DE 2074 0.58 0.68 0.53 154 T_MONEY_PERCENT 2059 0.81 1.40 0.53 155 TR_LOTS_OF_MONEY2 2059 0.81 1.40 0.53 156 XM_B_REG_HTML 2038 0.62 0.84 0.52 157 RELAYCOUNTRY_AU 2034 0.57 0.67 0.52 158 XM_B_TRADE_HTML 2022 0.49 0.42 0.52 159 MISSING_HEADERS 1929 0.44 0.33 0.49 160 HTML_IMAGE_ONLY_32 1904 0.49 0.50 0.49 161 DIET_1 1882 0.67 1.06 0.48 162 XMSubMetaSxObfu_02 1878 0.42 0.30 0.48 163 HTML_FONT_FACE_BAD 1878 0.65 1.01 0.48 164 XM_B_COPY_HTML 1873 0.62 0.91 0.48 165 XMMoneyMeta_00 1862 0.57 0.78 0.48 166 XMBody_17 1830 0.94 1.95 0.47 167 XMHTML_After_End 1823 0.77 1.40 0.47 168 FILL_THIS_FORM 1751 0.77 1.45 0.45 169 T_Symld_Words_02 1748 0.63 1.02 0.45 170 XMPhish30 1743 0.84 1.67 0.45 171 TR_LOTS_OF_MONEY3 1697 0.60 0.95 0.43 172 XMDateMe_00 1692 0.41 0.37 0.43 173 HTML_IMAGE_ONLY_28 1686 0.50 0.64 0.43 174 URI_NOVOWEL 1669 0.61 0.99 0.43 175 RDNS_DYNAMIC 1638 0.61 1.01 0.42 176 AC_DIV_BONANZA 1629 0.31 0.09 0.42 177 TM2_M_A_HREF_HREF 1608 0.42 0.43 0.41 178 HTTPS_HTTP_MISMATCH 1566 0.53 0.79 0.40 179 XM_RXBody 1565 0.50 0.72 0.40 180 FORGED_GMAIL_RCVD 1558 0.48 0.66 0.40 181 XM_H_PHPOS_M 1526 0.38 0.35 0.39 182 T_TooManySym_04 1501 0.28 0.05 0.38 183 HTML_TAG_BALANCE_BODY 1486 0.55 0.90 0.38 184 XMHTMLBadTable_001 1463 0.48 0.72 0.37 185 XMSubNoVowel 1461 0.44 0.58 0.37 186 XM_Body_Obfu01 1448 0.49 0.74 0.37 187 TM2_M_BODY_EMPTY 1438 0.36 0.33 0.37 188 SpammyFromTLD_02 1402 0.74 1.55 0.36 189 HTML_IMAGE_ONLY_24 1400 0.38 0.42 0.36 190 DOS_OUTLOOK_TO_MX 1356 0.26 0.09 0.35 191 XM_Walgreens_Forge 1338 0.24 0.01 0.34 192 TVD_SPACE_RATIO 1326 0.38 0.48 0.34 193 HTML_IMAGE_ONLY_20 1320 0.32 0.29 0.34 194 RCVD_IN_MSPIKE_BL 1317 0.47 0.74 0.34 195 XMLngstWrd_00 1316 0.37 0.42 0.34 196 MSGID_FROM_MTA_HEADER 1247 0.28 0.20 0.32 197 RCVD_IN_MSPIKE_L3 1229 0.23 0.07 0.31 198 DKIM_ADSP_NXDOMAIN 1225 0.37 0.49 0.31 199 MultiRelay_Combo 1223 1.30 3.37 0.31 200 MultiRelay_CC 1223 1.30 3.37 0.31 ----------------------------------------------------------------------